Alternatives and similar repositories for ETW-Trace

Users that are interested in ETW-Trace are comparing it to the libraries listed below

• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 3 years ago
• RIscRIpt / ntl
  Very tiny and selective implementation of STL for Windows NT kernel mode drivers
  ☆18Updated 4 years ago
• dearfuture / oldv-driver
  ☆14Updated 6 years ago
• KelvinMsft / UsbMon
  ☆37Updated 4 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• KernelPanic-OpenSource / Win2K3_NT_sdktools
  Windows Server 2K3 NT 5
  ☆12Updated 4 years ago
• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆32Updated 9 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• Vicshann / PEProtectDrv
  Some crazy PE executables protection kernel driver
  ☆19Updated 5 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 4 years ago
• addrianyy / asmlib_x64
  x64 assembler library
  ☆31Updated last year
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 7 years ago
• bb107 / ServiceCall
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Updated 6 years ago
• zhuhuibeishadiao / UserMemoryOperation64
  Map memory to user space and manipulate user memory, using capmon
  ☆24Updated 6 years ago
• NewWorldComingSoon / OAC
  Open Anti Cheat
  ☆27Updated 3 years ago
• Speedi13 / NsiAllocateAndGetTable-used-from-GetTcpTableInternal
  Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64
  ☆20Updated 7 years ago
• KernelPanic-OpenSource / Win2K3_NT_drivers
  Windows Server 2K3 NT 5
  ☆12Updated 4 years ago
• d-tatianin / BLogger
  An easy to use modern C++14/17 async cross-platform logger which supports custom formatting/patterns, colored output, Unicode, file loggi…
  ☆27Updated 5 years ago
• japajoe / StackVMCPP
  A stack and register based virtual machine which can compile and execute arbitrary code in runtime
  ☆45Updated 7 months ago
• moukayz / KernelDriverDemo
  ☆24Updated 6 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 6 years ago
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆29Updated 7 years ago
• moccajoghurt / MemWars
  ☆45Updated 7 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆26Updated 11 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆35Updated 4 years ago
• ajkhoury / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆13Updated 5 years ago
• biniamf / data_obfuscation
  Data Obfuscation for C/C++ Code Based on Residue Number Coding (RNC)
  ☆20Updated 4 years ago
• Alex3434 / GetHDDSerial
  Different ways to get the HDD Serial
  ☆39Updated 7 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 4 years ago
• GravitLauncher / Avanguard
  fork HoShiMin Avanguard
  ☆21Updated 7 years ago